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Trusted platforms have been proposed as a promising approach to enhance the 
security of general-purpose computing systems. However, for many resource- 
constrained embedded systems, the size and cost overheads of a separate 
Trusted Platform Module (TPM) ... 
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Using hardware- and software-based techniques to realize a primitive for 
externally verifiable code execution. 
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The use of programmatically generated input data in place of human-generated 
input data poses problems for many computer applications in use today. Mouse 
clicks and keyboard strokes can automatically be generated to cheat in online 
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Many fault-tolerant and intrusion-tolerant systems require the ability to execute 
unsafe programs in a realistic environment without leaving permanent 
damages. Virtual machine technology meets this requirement perfectly because 
it provides an execution ... 
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This paper describes an efficient and robust approach to provide a safe 
execution environment for an entire operating system, such as Linux, and all its 
applications. The approach, which we call Secure Virtual Architecture (SVA), 
defines ... 
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This paper discusses the design and implementation of a middleware guard for 
purposes of content filtering and information flow control in the Multiple 
Independent Levels of Security (MILS) architecture. The MILS initiative is a joint 
research effort ... 
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Hypervisors, popularized by Xen and VMware, are quickly becoming commodity. 
They are appropriate for many usage scenarios, but there are scenarios that 
require system virtualization with high degrees of both isolation and efficiency. 
Examples ... 
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Current models of Internet Computing are highly asymmetric - a host protects 
itself from malicious mobile Java programs, but there is no way to get 
assurances about the behavior of a program running remotely. The asymmetry 
stems from a behavior-based ... 
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